SUSE SLED15 / SLES15 Security Update : slurm (SUSE-SU-2019:2989-1)

This update for slurm fixes the following issues : Security issue fixed : CVE-2019-12838: Fixed an SQL injection bsc1140709. Non-security issue fixed: Added X11-forwarding bsc1153245. Moved srun from 'slurm' to 'slurm-node': srun is required on the nodes as well so sbatch will work. 'slurm-node' ...

SUSE SLED15 / SLES15 Security Update : ucode-intel (SUSE-SU-2019:2987-1)

This update for ucode-intel fixes the following issues : Updated to 20191112 official security release bsc1155988 Includes security fixes for : - CVE-2019-11135: Added feature allowing to disable TSX RTM bsc1139073 - CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues bsc114103...

SUSE SLED15 / SLES15 Security Update : ucode-intel (SUSE-SU-2019:2986-1)

This update for ucode-intel fixes the following issues : Updated to 20191112 official security release bsc1155988 Includes security fixes for : - CVE-2019-11135: Added feature allowing to disable TSX RTM bsc1139073 - CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues bsc114103...

SUSE SLED15 / SLES15 Security Update : libjpeg-turbo (SUSE-SU-2019:2971-1)

This update for libjpeg-turbo fixes the following issues : CVE-2019-2201: Several integer overflow issues and subsequent segfaults occurred in libjpeg-turbo, when attempting to compress or decompress gigapixel images. bsc1156402 Note that Tenable Network Security has extracted the preceding...

SUSE SLES15 Security Update : squid (SUSE-SU-2019:2975-1)

This update for squid to version 4.9 fixes the following issues : Security issues fixed : CVE-2019-13345: Fixed multiple cross-site scripting vulnerabilities in cachemgr.cgi bsc1140738. CVE-2019-12526: Fixed potential remote code execution during URN processing bsc1156326...

SUSE SLED15 / SLES15 Security Update : qemu (SUSE-SU-2019:2954-1)

This update for qemu fixes the following issues : Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15 Fix use-after-free in slirp CVE-2018-20126 bsc1119991 Fix potential DOS in lsi scsi controller emulation CVE-2019-12068 bsc1146873 Expose taa-no 'feature', indicating CP...

SUSE SLED15 / SLES15 Security Update : ucode-intel (SUSE-SU-2019:2957-1)

This update for ucode-intel fixes the following issues : Updated to 20191112 security release bsc1155988 - Processor Identifier Version Products - Model Stepping F-MO-S/PI Old-New - ---- new platforms ---------------------------------------- - CML-U62 A0 6-a6-0/80 000000c6 Core Gen10 Mobile - CNL...

SUSE SLED15 / SLES15 Security Update : xen (SUSE-SU-2019:2960-1)

This update for xen fixes the following issues : CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine Exception during Page Size Change, causing the CPU core to be non-functional. bsc1155945...

SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2019:2947-1)

The SUSE Linux Enterprise 15-SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine Exceptio...

SUSE SLED15 / SLES15 Security Update : qemu (SUSE-SU-2019:2955-1)

This update for qemu fixes the following issues : qemu was updated to v3.1.1.1, a stable, bug-fix-only release, which includes 2 fixes we already carry, as well as one additional use- after-free fix in slirp. CVE-2018-20126 bsc1119991, CVE-2019-14378 bsc1143794, and CVE-2019-15890 bsc1149811...

SUSE SLED15 / SLES15 Security Update : go1.12 (SUSE-SU-2019:2940-1)

This update for go1.12 fixes the following issues : Security issues fixed : CVE-2019-16276: Fixed the handling of invalid HTTP headers, which had allowed request smuggling bsc1152082. CVE-2019-17596: Fixed a panic in dsa.Verify caused by invalid public keys bsc1154402. Non-security issue fixed: G...

SUSE SLED15 / SLES15 Security Update : rsyslog (SUSE-SU-2019:2937-1)

This update for rsyslog fixes the following issues : Security issues fixed : CVE-2019-17041: Fixed a heap overflow in the parser for AIX log messages bsc1153451. CVE-2019-17042: Fixed a heap overflow in the parser for Cisco log messages bsc1153459. Other issue addressed: Fixed an issue where...

SUSE SLED15 / SLES15 Security Update : libssh2_org (SUSE-SU-2019:2900-1)

This update for libssh2org fixes the following issue : CVE-2019-17498: Fixed an integer overflow in a bounds check that might have led to the disclosure of sensitive information or a denial of service bsc1154862. Note that Tenable Network Security has extracted the preceding description block...

SUSE SLED15 / SLES15 Security Update : gdb (SUSE-SU-2019:2902-1)

This update for gdb fixes the following issues : Update to gdb 8.3.1: jscECO-368 Security issues fixed : CVE-2019-1010180: Fixed a potential buffer overflow when loading ELF sections larger than the file. bsc1142772 Upgrade libipt from v2.0 to v2.0.1. Enable librpm for version librpm.so.3...

SUSE SLED15 / SLES15 Security Update : MozillaFirefox, MozillaFirefox-branding-SLE (SUSE-SU-2019:2871-1)

This update for MozillaFirefox, MozillaFirefox-branding-SLE fixes the following issues : Changes in MozillaFirefox : Security issues fixed : CVE-2019-15903: Fixed a heap overflow in the expat library bsc1149429. CVE-2019-11757: Fixed a use-after-free when creating index updates in IndexedDB...

SUSE SLED15 / SLES15 Security Update : samba (SUSE-SU-2019:2866-1)

This update for provides the following fixes : Following security issues were fixed : CVE-2019-14847: User with 'get changes' permission could have crashed AD DC LDAP server via dirsync bsc1154598. CVE-2019-10218: Client code could have returned filenames containing path separators bsc1144902...

SUSE SLED15 / SLES15 Security Update : samba (SUSE-SU-2019:2868-1)

This update for samba fixes the following issues : Security issues fixed : CVE-2019-14847: User with 'get changes' permission can crash AD DC LDAP server via dirsync bsc1154598. CVE-2019-10218: Client code can return filenames containing path separators bsc1144902. CVE-2019-14833: Fixed Accent wi...

SUSE SLED15 / SLES15 Security Update : php7 (SUSE-SU-2019:2819-1)

This update for php7 fixes the following issues : Security issue fixed : CVE-2019-11043: Fixed possible remote code execution via envpathinfo underflow in fpmmain.c bsc1154999. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisor...

SUSE SLES15 Security Update : runc (SUSE-SU-2019:2810-1)

This update for runc fixes the following issues : Security issue fixed : CVE-2019-16884: Fixed an LSM bypass via malicious Docker images that mount over a /proc directory. bsc1152308 Non-security issues fixed: Includes upstreamed patches for regressions bsc1131314 bsc1131553. Note that Tenable...

SUSE SLED15 / SLES15 Security Update : libtomcrypt (SUSE-SU-2019:2808-1)

This update for libtomcrypt fixes the following issue : - CVE-2019-17362: Fixed an improper detection of invalid UTF-8 sequences that could have led to DoS or information disclosure via crafted DER-encoded data bsc1153433. Note that Tenable Network Security has extracted the preceding description...